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Abstract 

One of the fundamental questions of Algorithmic Mechanism Design is whether there exists an inher- 
ent clash between truthfulness and computational tractability: in particular, whether polynomial-time 
truthful mechanisms for combinatorial auctions are provably weaker in terms of approximation ratio 
than non-truthful ones. This question was very recently answered for universally truthful mechanisms 
for combinatorial auctions 4*, and even for truthful- in-expectation mechanisms [I2l. However, both of 
these results are based on information-theoretic arguments for valuations given by a value oracle, and 
leave open the possibility of polynomial-time truthful mechanisms for succinctly described classes of 
valuations. 

This paper is the first to prove computational hardness results for truthful mechanisms for combinato- 
rial auctions with succinctly described valuations. We prove that there is a class of succinctly represented 
submodular valuations for which no deterministic truthful mechanism provides an m^''^~'^-approximation 
for a constant e > 0, unless NP = RP {m denotes the number of items). Furthermore, we prove that even 
truthful-in-expectation mechanisms cannot approximate combinatorial auctions with certain succinctly 
described submodular valuations better than within n? , where n is the number of bidders and 7 > 
some absolute constant, unless NP C P/poly. In addition, we prove computational hardness results for 
two related problems. 

1 Introduction 

Is it possible to design truthful polynomial-time mechanisms that achieve a good approximation ratio? This 
is one of the basic questions in Algorithmic Mechanism Design. The focus of most of the work on this 
question is on settings in which on one hand there exists a truthful algorithm that maximizes the social 
welfare (VCG), but on the other hand computing the optimal solution is computationally intractable. The 
goal is therefore to determine whether there exist truthful polynomial time mechanisms that guarantee good 
approximation ratios. Several settings were considered in the literature, but the flagship challenge is to 
design polynomial-time truthful approximation mechanisms for the problem of combinatorial auctions. 

In a combinatorial auction, we want to sell m items to n bidders with valuation functions Vi : 2['"1 — > M-j.. 
As usual, we assume that fi(0) ~ and that Vi is monotone, i.e. Vi{S) < Vi{T) whenever S G T. The 
goal is to design a mechanism that allocates disjoint sets Si, . . . , Sn to the n bidders, optimizing (at least 
approximately) the social welfare X]r=i ^*('^«)' ^ that incentivizes the bidders to report their true 
valuations (the property of incentive- compatibility, or truthfulness). This is done by charging payments 
Pi,...,Pn by the mechanism, so that for each player, reporting his true valuation maximizes the profit 
Vi{Si) — Pi (in the case of truthfulness in expectation, the reporting the true valuation maximizes the 
expectation of this expression). 

Without the requirement of truthfulness, combinatorial auctions admit constant-factor approximation 
algorithms for various non-trivial classes of valuations functions, in particular for submodular valuations: 
A valuation v is called submodular if for each S and T we have that v{S) + v{T) > v{S OT) + v{S U T). 
Combinatorial auctions with submodular valuations admit a (1 — l/e)-approximation [21\ and it is also known 
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that this approximation is optimal [TB]. On the other hand, the VCG mechanism is truthful and provides 
optimal social welfare, but naturally is not computationally efficient. Therefore, submodular valuations form 
a natural setting to investigate the question whether truthfulness can be reconciled with polynomial-time 
approximation or not. 

The best known polynomial time truthful mechanism for combinatorial auctions with submodular valu- 
ations achieves a factor of ©(-y/m) |S|. This is quite a poor ratio indeed, but there was hope that one can 
significantly improve over it. Indeed, for a variety of other interesting settings good truthful mechanisms do 
exist. For example, if bidders still have submodular valuations but are able to answer the more complicated 
demand queries, a randomized truthful 0(logmloglogm)-approximation mechanism exists [3], a powerful 
construction of [18] yields optimal truthful-in-expectation mechanisms for many settings, and very recently 
gave VCG-based truthful-in-expectation (1 — 1/ e)-approximation mechanisms for combinatorial auctions 
with explicit coverage valuations (and more general valuations in a certain oracle model). This and related 
results raised hopes that truthfulness (or at least truthfulness-in-expectation) might be reconcilable with 
computational efficiency. 

On the negative side, it was proved first that any universally truthful VCG-based (a.k.a. maximal in 
range) mechanism that achieves an m"'^/®~'^-approximation for submodular valuations requires exponential 
communication [5]. Still, this result did not rule out the possibility of a different, non-VCG mechanism, 
and it also did not address the possibility of truthful-in-expectation mechanisms. Only recently, [4] proved 
that if a deterministic truthful or universally truthful mechanism can access the valuations only through 
value queries (given S, what is v{S)7) and guarantees an approximation ratio of to^^^"*^, for any constant 
e > 0, then it must make exponentially many value queries. Moreover, |12| proved that even truthful-in- 
expectation mechanisms that provide an approximation ratio better than m'^ , for some constant 7 > 0, 
require exponentially many value queries. 

The skeptical reader may wonder now whether these results [4j [12] are a symptom of the value oracle 
model, and whether they just reflect an informational bottleneck: value oracles are too weak for transferring 
sufficient information from the bidders to the mechanism. One may further argue that when bidders are 
required to provide a succinct explicit description of their valuation, in some agreed-upon bidding language, 
these informational bottlenecks disappear. Consequently, good computationally efficient mechanisms may 
exist. 

In some domains, like multi-unit auctions where all items are allocated |17j and combinatorial public 
projects |20j , the hardness of deterministic truthful polynomial time algorithms for succinct valuations with 
good approximation ratios is already known. However, their technique does not seem to be applicable to 
combinatorial auctions or any other auction domain. The reason is that both papers use the characterize- 
and-optimize approach: they first characterize the truthful mechanisms in the domain, showing them to 
be VCG-based, and then show that computationally-efficient VCG-based mechanisms do not provide good 
approximation ratios, under plausible complexity assumptions. The characterization step in these papers 
heavily relies on the fact that the domains exhibit strong forms of externalities between the bidders. Com- 
binatorial auctions, and auction domains in general, are different since the value of a bidder depends only 
on the bundle he receives. Recently a characterization of "scalable" two-player multi-unit auctions was 
obtained in [7], but even there the additional assumption of scalability is needed, and it is not clear if we 
can extend it to more than two players and submodular valuations. Furthermore, no characterizations of 
truthful-in-expectation mechanisms are known at all, and such characterizations are currently beyond the 
reach of our techniques, even for relatively simple domains that do exhibit strong externalities. 

The only negative result for combinatorial auctions with succinct valuations so far has been [1]. There, 
building on the work of [20] , it is proved that any universally truthful VCG-based mechanism that achieves a 
m^/^~'^-approximation for budget- additive valuations (and some other natural, succinctly represented classes 
of valuations) would imply NP C P/poly^. But just as previously in the information-theoretic setting, the 
question of the existence of a non-VCG based mechanism, or even a VCG-based truthful-in-expectation 

^For succinct representations, the only barrier to designing a truthful mechanism is computational complexity, since with 
unbounded computational power, the truthful VCG mechanism provides an optimal solution. Thus any negative results in this 
setting will likely depend on complexity-theoretic assumptions. 
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(MIDR) mechanism, remained open. Recall that such mechanisms are known to give non-trivial results - 
see above. Thus the question still remained, whether truthful mechanisms for combinatorial auctions with 
succinctly represented valuations are in principle less powerful than non-truthful ones. 

In this paper we give a definite answer to this question, and show that unless NP C P/poly, there 
are no truthful polynomial-time constant-factor approximation mechanisms for combinatorial auctions with 
succinctly represented submodular valuations (while there is a known (1 — l/e)-approximation for such 
valuations without truthfulness). This result rules out even truthful- in-expectation mechanisms. This is 
the first separation in terms of computational complexity between truthful and non-truthful mechanisms for 
combinatorial auctions. For deterministic mechanisms, our result is even stronger: we prove a tight m}/'^~'^ 
hardness factor. In other words, even if able to bypass the information bottleneck, the auctioneer will face 
an equally hard barrier to pass: the computational one. 

Our main results All of our results hold for succinctly represented valuations, in particular succinctly 
represented submodular valuations. We say that a class C of valuation functions v : 2['"1 — >■ R+ is suc- 
cinctly represented by an encoding v, if for each u e C, ^{v) is a bit string of size polynomial in m and 
there is a procedure that, given ^{v) and S C [m], computes v(S) in time polynomial in m. Examples 
of succinctly represented functions that where studied in the literature include budget additive valuations, 
coverage valuations, and XOS (with polynomially many clauses). See, e.g., [19) . 
Our two main results are for combinatorial auctions: 

• We prove that there is a class of succinctly represented submodular valuations for which no deterministic 
truthful mechanism provides an 77i^/^~'-approximation for a constant e > 0, unless NP = RP. 

• We prove that there is a constant 7 > such that for any constant number of bidders n, there is a 
class of succinctly represented submodular valuations for which no randomized truthful-in-expectation 
mechanism achieves a n'''-approximation, unless NP C P/poly. 

Results for other domains We complement our main results with two additional impossibilities for other 
domains: combinatorial public projects and multi-unit auctions. 

In a combinatorial public project, a single set S should be chosen for n bidders with valuation functions 
Vi, maximizing X]"=i ^^i('S') under the constraint that \S\ = k. 

• We prove that for combinatorial public projects with coverage valuations, there is no constant-factor 
truthful-in-expectation mechanism, unless NP C P/poly. 

We remark that it was already known that combinatorial public projects with coverage valuations do not 
admit any deterministic truthful mechanism with approximation better than m^^^~'^ [2]. On the other hand, 
the problem of flexible combinatorial public projects, where the constraint \S\ = fc is replaced by \S\ < fc, 
does admit a truthful-in-expectation (1 — l/e)-approximation for coverage valuations [101 . Thus we prove a 
separation between flexible (IS*] < k) and exact {\S\ = k) combinatorial public projects. 

We prove a related separation in the domain of multi-unit auctions. In [5] it is shown that there exists 
a polynomial time truthful-in-expectation FPTAS for multi-unit auctions. This mechanism is maximal 
in distributional range (MIDR). It is also shown there that no polynomial time truthful-in-expectation 
mechanism for two players in the oracle model can provide an approximation ratio better than 2, if all items 
are allocated. We complement this result by showing that no polynomial-time MIDR mechanism for two 
players with succintly described valuations achieves an approximation ratio better than 2, unless RP — NP. 

A word on our techniques This paper builds on advances developed in a sequence of recent papers 
[H 1121 [3] . Our proofs for combinatorial auctions are obtained by considering the previously developed proofs 
in the value oracle model [H [T^ , and converting them into computational hardness proofs in the following 
manner: The proofs in [U [T^] depend on a certain "hidden set" which is hard to find by value queries. In 
our new proofs, the hidden set in both cases is represented implicitly as a solution to some computationally 
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difficult problem (e.g. SAT). However, some new difficulties arise when trying incorporate this idea in the 
proof of hardness for truthful mechanisms. 

In the case of deterministic truthful mechanisms, the construction of the valuation function in [4j itself 
depends on the properties of the presumed mechanism, namely on its pricing scheme. We resolve this issue 
by incorporating a component in the representation of a valuation that allows us to feed a description of the 
presumed mechanism itself into the valuation, thus obtaining a contradiction by a diagonalization argument. 

In the case of truthful-in-expectation mechanisms, the location of the hidden set affects the valuation 
function more substantially than just the value of a single set. We need a more sophisticated encoding to 
be able to evaluate the function efficiently. We appeal to the encoding of submodular functions using list- 
decodable codes which was used recently in [5] to obtain inapproximability results for submodular optimization 
problems. Using list-decodable codes, we are able to encode our valuations in a way that simultaneously 
allows the flexibility of a "hidden set" described implicitly by a computationally difficult problem, and 
efficient evaluation. An additional technical difficulty in this proof is the presence of certain parameters 
necessary for a reduction, whose existence is proved non-constructively in |12| . We have to make sure 
that these parameters can be described by a polynomial-size advice string (leading to the conclusion that 
NP C P/poly). 

Our hardness result for combinatorial public projects is more direct, appealing to the technical properties 
of Feige's reduction for the hardness of Max-fc-cover [14]. We use the known fact that combinatorial public 
projects with 1 bidder essentially have to maximize over a certain range of distributions |12) . and using the 
structure of Feige's reduction, we obtain a contradiction with the hardness of finding good solutions for the 
Max-A:-cover problem. 

An interesting feature of all our proofs is that they do not rely on the Sauer-Shelah lemma or VC- 
dimension, which played an important role in previous computational hardness results for combinatorial 
public projects and combinatorial auctions [201 El E] ■ One reason for this is that in the case of truthful- 
in-expectation mechanisms, it is not clear how VC-dimension should be used at all - the range of possible 
distributions output by the mechanism is a continuum which does not lend itself to combinatorial analysis 
such as VC-dimension. But even in our proof for deterministic mechanisms, we do not appeal to the 
Sauer-Shelah lemma. Rather, we design the representation of a valuation function in a way that allows the 
embedding of a computationally hard problem, and yet admits efficient evaluation of the function. 

Open questions We leave several interesting questions for future work. First, in the bidding languages we 
use to prove the hardness of combinatorial auctions, answering demand queries is NP-hard. Can one prove an 
analogous hardness result for bidding languages in which demand queries can be answered efficiently? This 
seems to be a challenging question that requires substantial extensions of our techniques. For example, with 
demand queries it is possible to achieve a logarithmic approximation via a universally truthful mechanism, 
which beats the bounds we give. Another question is to prove impossibility results for specific bidding 
languages, like budget-additive, coverage, and XOS. 

2 Deterministic Truthful Mechanisms for Combinatorial Auctions 

Our first proof is about the impossibility of deterministic truthful mechanisms for combinatorial auctions 
with submodular bidders. In ^ it is shown that any deterministic truthful mechanism for combinatorial 
auctions with submodular bidders that provides an approximation ratio better than makes exponentially 
many value queries. This is proven using a direct hardness approach. The following theorem (non trivially) 
extends this approach and shows how to obtain impossibilities that are based on computational complexity. 

Theorem 2.1. There is a class C of succinctly represented monotone submodular valuations, such that if 
there is a deterministic truthful polynomial-time mechanism for combinatorial auctions with valuations in C 
that guarantees an approximation ratio of m^/^~'^, for any fixed e > 0, then NP — RP. 
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Proof sketch We show that if a truthful algorithm provides a good approximation, then there must exist 
a player i and valuations w_i such that there exists a submenu of the menu induced by that is not only 
large but also has a some specific structure. Then we show that for certain valuations of player i, finding a 
profit maximizing bundle (which is a must for a truthful mechanism according to the taxation principle) is 
computationally hard, and allows one to solve the SAT problem by reduction. 

The first part of the reduction is to find the valuations V-i that induce a large, structured menu for 
player i. This is done by showing that a set of random "polar additive" valuations induce a menu with 
the required structure with high probability. The second part is the optimization part, in which we present 
valuations Vi for which finding the bundle that maximizes the profit is computationally hard. In [3] this 
is done by constructing a generic family of valuations using the properties of the structured menu induced 
by V-i, and choosing a specific valuation by giving a bonus to one particular bundle (the intended profit 
maximizing bundle). However, in this paper we work with succinctly described valuations, i.e. each valuation 
should have a polynomial-size description which allows one to evaluate the function efficiently. This causes 
an extra layer of complication: not only that the structured menu depends on the truthful mechanism itself 
and the valuations of the other players, we cannot even explicitly describe it, since is exponentially large. To 
overcome this obstacle, we use a "diagonalization argument" : the description of a valuation Vi involves the 
description of an algorithm (or a circuit) that verifies whether a given set S is in the structured menu and 
computes the correct value Vi{S). Eventually, we feed a circuit describing the presumed mechanism itself 
into the valuation. 

We also have to specify succinctly the special profit-maximizing bundle, so that finding it is computa- 
tionally hard. We do that in two steps. First, we choose some random projection of every bundle in the 
structured submenu to {0, 1}^, where £ — poly{n,m}. Next, we would like to specify some special strings 
in {0, lY such that bundles in the structured menu that are projected to the special strings will be the 
profit-maximizing bundles. Of course, if we just specify the special strings in the straightforward way, it 
might be easy for an algorithm to efficiently find the profit-maximizing bundle. Therefore, we specify the 
special strings to be the satisfying assignments of a SAT instance, which completes our reduction. 

To summarize, we randomly construct valuations w-i, and we show that with some constant probability 
the V-i induce an exponentially large structured submenu. We then construct a valuation Vi of the i'th player 
based on this structured submenu; we use a decription of the mechanism itself to do so. The profit-maximizing 
bundles of Vi will be exactly all bundles that are (randomly) projected to a satisfying assignment of the 
formula. We will show that with inverse-polynomial probability the construction of the random valuations 
succeeds and the random projection indeed maps a bundle in the menu to a satisfying assignment, and in 
this case a truthful algorithm must find a solution to the SAT instance. This will show that the existence of 
a truthful mechanism as in the theorem implies NP = RP. 

2.1 The Bidding Language 

We start the proof by specifying the bidding language that we use, i.e. the class of valuations and their 
representation on the input. 

Additive valuations Our class of valuations includes the set of all additive valuations: for each bundle S, 
v{S) = Tij^sv{{j})- We may use any natural representation of additive valuation to do that. In particular, 
the proof uses a certain type of additive valuations called polar additive valuations. These are additive 
valuations such that for each item j either v{{j}) = 1 or v{{j}) = We sometimes use random polar 
additive valuations. As the name suggests, these are polar additive valuations in which the value of each 
item j is set independently at random Vi{j) ~ 1 with probability p — —, ot Vi{j) = -K^ with probability 
1-p. 

Bonus valuations In addition, the bidding language is able to express the following bonus valuations. 
Each bonus valuations is parameterized by four parameters: t,k, P{-), B{-), where t^k are non-negative 
numbers, B : 2*^ — )■ {0, 1} is a boolean function and P : 2^^ — >■ {0, 1} is a monotone boolean function, both 
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described by polynomial-size circuits. Hence, the complete representation (t, k, P, B) of a bonus valuations 
takes polynomial space. Given these parameters, the following valuation w is a bonus valuation; 



Notice that computing the value v{S) for a given bundle S (that is, implementing value queries) for 
bonus valuations can be done in polynomial time, given the representation above. Also, similar to [J, it 
can be verified that v{S) is a monotone submodular function for any boolean function B : 2*^ — !■ {0, 1} and 
monotone P : 2^" {0, 1}. 

The definition of the bonus function is similar but not identical to the one in 0]. To assist the reader 
who is familiar with the proof in [4], here is how the specific functions P(-) and B{-) that we choose later will 
roughly correspond to the construction in JT : For sets of size fc, the function P{S) describes the "structured 
menu" , by giving value 1 to bundles in the structured menu and otherwise. It also specifies the bundles 
that are larger and more expensive than the bundles in the structured menu, by giving value 1 to them. 
Among the bundles in the structured menu, the function B{-) picks the bonus bundles by giving value 1. 



Our goal is to solve a SAT instance, using the presumed truthful mechanism. Recall the following concept 
from [4]: TZv_^ is the menu induced by V-i, i.e. the collection of all possible sets that could be allocated to 
bidder i, assuming that the (n — l)-tuple of valuations of other bidders is V-t. If a set S" S TZv-i is allocated 
to bidder i, he is charged a price py_.(S) that does not depend on his own declared valuation (the "taxation 
principle"). Some sets are not on the menu, but for convenience we extend the definition of Pv^tiS) to 
S ^ Ti-v-i, by setting Pv^tiS) minTeK„ .:ScTPu_i(T)- If there no superset of S on the menu, we define 
Pf-.('S') = oo- 

Definition 2.2 (Structured Submenu). Given valuations v^i of all bidders i' ^ i, and parameters k,p d 
[0, m], the structured submenu S(v^i, k,p) is the collection of all sets if items S such that 

• S e Ti-v^i, 

• \S\ = k, 

• P - -k: <Pv-,{S) <p, 

• for all T £ TZy_. such that T strictly contains S, py_.{T) — py_.{S) > 

We call a bundle S a candidate, if it satisfies the conditions above (i.e. S G S(v^i,k,p), when S{v^i, k,p) 
will be clear from the context). 

Lemma 2.3 (essentially from [4 ). Let A be a (deterministic) truthful j^- approximation mechanism for 
combinatorial auctions with submodular valuations. Let v^i be a set of valuations where each valuation in 
v^i is a random polar additive valuation (with m/n items of value 1). Then, with a constant probability, 

there exists k £ {l,...,m} and p £ [0,rn] (a multiple ofl/vv') such that \S{v-i,k,p)\ > ■ 

In |3] only the existence of such a structured menu was proven. However, it is easy to see that the proof 
of [4] actually shows that this event occurs with constant probability as well. Specifically, the proof works as 
follows: we select at random a player i and construct random polar additive valuations for all other players. 
Then, with constant probability there are parameters p and k such that the respective structured submenu 
is sufficiently large. 




r \s\-t, 



if |5| < k- 

if |5| > k and P{S) = 
if \S\ = k, P{S) = 1 and B{S) ^ 0; 
if \S\ = k, pIs) = 1 and B{S) = 1; 
if IS"! > k and P{S) = 1. 



2.2 The Reduction 
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In our construction wc need to find k and p in polynomial time. We do that as follows. Obscirving that k 
can be one of m possible values 1, . . . , m and that p can be one of values . . . , m, we notice that 

number of possible combinations of values for p and k is polynomially bounded. Therefore we can try each 
combination one by one. The rest of the analysis assumes that the values of k,p and the random coins are 

successful in the sense that the structured submenu S{v^i,p, k) has cardinality at least iq^^^b ■ 

Next, we set up a bonus valuation for bidder i that will allow us to embed the SAT problem in it. We 
choose the parameter t to be equal to t = 2^"^. The parameters k and p of the bonus valuation are identical 
to the parameters k and p of the structured submenu. The following lemma describes the function Pp{-) 

that we use as the P(-) parameter of the bonus valuation. 

Lemma 2.4. Let A be a truthful mechanism for combinatorial auctions with submodular bidders. Fix 
valuations u_j for all bidders except i, and parameters k GZ,p G [0, m] . Let Pp{S) be the following function: 



Then Pp{-) is a monotone boolean function and Pp{S) can be evaluated in time polynomial in n, m, and the 

running time of A. 

Proof. Let us verify that Pp{-) is a monotone function. Let S CT. If Pp{S) = 1 then one possibility is that 
5 is a candidate and thus by definition of a structured menu, p„_.(T) > p. The other possibility is that 
l^l > k and Pv_i{S) > p. Then we also have |T| > l^l > k and Pv_i{T) > pv_^{S) > phy the monotonicity 
of the payment function Pv_i. In both cases, Pp{T) = 1. 

To evaluate Pp{S), we show that we can efficiently decide whether 5 is a candidate and whether Pv_i{S) > 
p or not, using the truthful mechanism as a black box. Given a bundle S, consider the following additive 
valuation v for bidder i: v{{j}) = 2p ii j & S and v{{j}) = otherwise. Let S" be the bundle allocated to i 
in A{v, v^i) and let p' be the price that i is charged in this instance. 

First, assume that \S\ = k; here we want to determine whether 5 is a candidate. We start with showing 
that if 5 is a candidate, then the returned bundle under valuation v must be S" = S. To see this, recall 
that if 5 is a candidate, then S G 'R-v_. and Pv_i{S) < p, therefore the profit from S under valuation v is 
v{S) —Pv^iiS) > 2p\S\ — p. No other set can have higher profit, because supersets of 5* have the same value 
and strictly higher price, while sets that do not contain S have value at most 2p|S'| — 2p. Thus, S' = S and 
we also learn the price py_.{S). If Pv_-{S) G [p — it remains to decide whether for each T that strictly 

contains S, Pv^AS) + < Pv-i{T). This can be done by altering v to another additive valuation vj which 
is identical to v except that Vj{{j}) = for exactly one item j. Observe that Pv-i{,S) + ^ < Pv-i{T) for 
all T D S" if and only if i is allocated S in A{v-i,Vj) for every j ^ S. In this case, we conclude that 5 is a 
candidate. If the above process fails at at point, S cannot be a candidate. 

Next, we consider the case where \S\> k; here we just need to check whether pv_^ {S) > p. li S' = S then 
we learn the price of S and we can immediately check whether pv_^{S) > p. Next, consider the case where 
there exists some item j G S\S'. Then wc claim that {S) > p. To see this, observe that Pv_^ (5) —p' > 2p 
since the marginal value of j is 2p. Since p' is nonnegative we have that . (5*) > 2p> p. 

The last remaining case is that S C S'. Then we claim that Pv-i{S) = Pv-XS'): The price function 
Pv-i{') is monotone so we have that Pv-AS) < Pv-i{S'). Moreover, our construction of v implies that 
v{S') = v{S) and thus if Pv-i{S') > Pv-i{S) then the profit from S is larger than the profit from S' . 
But this cannot be since S is allocated to i by the (truthful) mechanism. So we can again check whether 



We now proceed to implementing the function B(-). The role of this hmction is to specify which candidate 
bundles get a bonus. A naive way to do so would be to explicitly list the bundles that get a bonus. However, 
this would make finding a profit-maximizing bundle too easy. Thus, we use an implicit way of specifying 
these bundles: all bundles that correspond to a satisfying assignment of a certain SAT instance. Specifically, 
given a boolean formula cj) on£ variables, we construct a circuit for the following function -B(-). We generate 



r 1 if \S\ = k and S is a candidate {S G S{v-i, k,p)); 
Pp{S) = \ 1 if \S\>k andpy_AS) > p; 



otherwise. 



Pv.AS)=Pv.AS')>P- 



□ 
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a uniformly random matrix T £ {0, 1}^^™^ which induces a Unear mapping T : {0, 1}™ — > {0, 1}^ where 
T{S) = T ■ Is, all operations modulo 2. We let B{S) = 1 if and only if the assignment of the £ variables 
defined by T{S) satisfies cj). 

Claim 2.5. Suppose that (j> is satisfiable and x G {0, 1}^ is a satisfying assignment. If S C {0, \S\ > 2^^, 
then with probability at least 1 — 2^^ there exists some S £ S such that T{S) = x. 

Proof. Let Zs denote the indicator variable of the event T{S) — x, and let Z = J2ses^s- "^^^ 
assume that 0^5; removing the empty set decreases \S\ only by 1. Then, for any S £ S, we have 
E[Zs] = Pt[T{S) ^x]= 2-\ since T{S) is distributed uniformly in {0, 1}^ Therefore, E[Z] = 2-^|5|. 

Moreover, for any S ^ S' e S, we have F,[ZsZs'] = Pr[T(S') = T{S') = x] ^ 2~^'^. This is because 
T(S") = T[S n 5") ® Eies'\s ^» ^^^re is the z-th column of T, uniformly distributed in {0, l}'^ and 
independent of T{S) for i ^ S. (We can assume WLOG that S' \ S ^ 0.) Therefore even conditioning on 
T{S) = X, the probability that T{S') = x is still 2^^. 

In other words, the variables Zs are pairwise independent and we can compute Var[Z] = J2ses ^^^i^s] 
J2sesi^i^s] - E[^s]^) = (2-^ - 2-2^)|5|. By Chebyshev's inequality, 

PHZ = 01 < = (2-^- 2-^^)1'^! < ^ < 1 

^ ^ - (E[Z])2 (2-^|5|)2 - 2-^|5| - 2^' 

□ 

Finally, we prove that if </> is satisfiable and all the random choices are successful in the sense that the 
structured submenu S{v_i,k,p) is sufficiently large and the random transformation T hits the satisfying 
assignment, then the mechanism must return a bundle S' such that B{S') = 1. 

Lemma 2.6. // bidder i 's valuation v is a bonus valuation as constructed above and there exists S* G 
S{v^i,k,p) such that T{S*) is a satisfying assignment to the formula (j), then bidder i receives a bundle S' 
such that B{S') = 1. 

Proof. The proof is very similar to one that can be found in 4, and follows from the following series of 
claims. We fix some bundle S* G S{v-i,k,p) such that B{S*) — 1. 

Claim 2.7. v{S*) -~Pv_,iS*) > v{S) ~ py_^{S), for every S such that \S\ < k or P{S) = 0. 

Proof. Wehavew(S'*)-p„_,(5*) > kt-p > kt-m. li\S\ < k, then clearly w(S'*)-p,„_, (S**) > v{S)-py_^{S), 
because v{S) < {k ~ l)t < kt ~ m (since t = 22"). If |5| > k and P{S) = 0, then v{S) = (fc - l/2l^l)t < 
{k - 1/2")^ <kt~m, again because t = 2^™. □ 

Claim 2.8. v{S*) - Pv_,iS*) > v{S) - py_^{S), for every S such that \S\ > k and P{S) = 1. 

Proof. Here, v{S) < kt = v{S*). To finish the proof, observe that by definition of P{S) we have Pv-i{S) > 
P>PvAS*). ' □ 

Claim 2.9. vf {S*) - p^_XS*) > vf (S) ~ py_^{S), for every S such that \S\ = k, P{S) = 1 and B{S) = 0. 

Proof. Hence v{S) — kt ~ while v{S*) = kt. By the properties of the structured submenu, \Pv-i{S) — 
Pv^i{S*)\ < which proves the claim. □ 

Therefore, the only possible bundles allocated to bidder i have |S'| = fc, P{S) = 1 and B{S) = 1. □ 

Now we can finish and summarize the proof of Theorem 12.11 
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Proof. Let e > be any positive constant. We assume that there a truthful mechanism for combinatorial 
auctions with 71 submodular bidders and m items that achieves a ^-approximation, when n — lOm^/^"*^. 
Our goal is to solve a SAT problem in which we are given a formula (j) with £ variables. 

We choose parameters n — lOm^/^^' = poly{£) so that j^Q^^'^'mti > 2^^, and we produce an instance of 
combinatorial auctions with n bidders and m items. We set t — 2^™. We pick a random bidder i and random 
polar additive valuations v-i for bidders i' ^ i. Then we try all possible values oi k € {l,2,...,m} and 
p £ {;^, . . . , m} and we construct a bonus valuation for bidder i with these parameters. We construct a 
circuit implementing the function P{-), by simulating the computation of the presumed mechanism, according 
to Lemma 12.41 We also pick a random matrix T e {0,1}^^™ and construct a circuit implementing the 
function B{-) such that B{S) = 1 if and only if T{S) satisfies 0. Then we run the mechanism on the bonus 
valuation defined by (t, k, P, B) for bidder i and V-i for the remaining bidders. 

If the mechanism returns a bundle S for bidder i such that B{S) — 1, we have found a satisfying 
assignment T{S) to the formula </>. If not, we repeat this process polynomially many times. If the process 
never succeeds, we answer that the formula is unsatisfiable. This procedure can fail only if the formula is 
satisfiable, with exponentially small probability. □ 

3 Truthful- in- Expect at ion Mechanisms for Combinatorial Auctions 

In this section, we want to rule out the existence of any constant-factor truthful- in- expectation mechanism, 
as opposed to deterministic and universally truthful mechanisms. In fact, the proof holds for the stronger 
variant of approximately truthful-in-expectation mechanisms. 

Definition 3.1. Fore > 0, a mechanism with allocation and payment rules A andp is (1 — e)-approximately 
truthful-in-expectation if every player (1 — e)- approximately maximizes his expected utility by truthfully re- 
porting his valuation function, meaning that 

E[v,{A{v)) - p,{v)] > {I - e)E[v,{A{v'^,v^,)) ~ p,{vl,v^,)] 

for every player i, (true) valuation function Vi, (reported) valuation function v[, and (reported) valuation 
functions v^i of the other players. The expectations above are over the coin flips of the mechanism. 

We prove the following. 

Theorem 3.2. There are absolute constants 6,7 > such that for every fixed n, there is a class of succinctly 
represented monotone submodular valuations, for which there is no n^^ -approximation truthful-in-expectation 
(even (1 — e)- approximately truthful-in-expectation) mechanism for combinatorial auctions with n players, 
unless NP C P/poly. 

The proof of this theorem builds on several recent advances and techniques that have been developed in 
this area. Therefore, before we describe the proof in detail, we summarize its main components. 

Proof background Wc start from the hardness proof in the value oracle model that was developed in 
|12| . The proof of 12 is based on a density-boosting technique which implies that every mechanism for 
combinatorial auctions with submodular bidders must either use an exponential number of value queries, or 
we obtain a contradiction with the property of truthfulness in expectation. The contradiction is obtained 
from a technical argument relying on the symmetry gap machinery of |22j . Recently, [9] proposed a generic 
way of converting hardness proofs using this machinery into computational hardness proofs, for succinctly 
represented submodular functions. This reduction uses list decodable codes and the known hardness of 
Unique-SAT (deciding whether a formula has or 1 satisfying assignments). We appeal to the same idea 
here, and represent submodular valuation functions in the same format as [9]. 

A price that we have to pay for using the framework of jOj is that the symmetry gap argument can be 
used only with parameters that lead to hardness depending on the number of players, but not the number of 
items {n~'^ , as opposed to m~^). Possibly these parameters can be optimized to yield hardness with a (mild) 
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dependence on m (depending on the best currently known list-decodable codes), but for ease of exposition 
we restrict ourselves to ruling out ^"'''-approximation in this paper. 

Following the framework of 0, assuming that there exists an approximately-TIE mechanism providing 
a good approximation for these succinctly represented functions, we provide a way of solving Unique-SAT 
using the mechanism. The way we embed the Unique-SAT problem in an instance of combinatorial auctions 
is based on the density-boosting technique of 12j . Unfortunately, the parameters describing the embedding 
are algorithmically inaccessible and must be provided as an advice string. The last technical question we 
have to deal with is whether these parameters can be described by a polynomially-bounded string for each 
input size. This requires some additional work and modification of certain technical lemmas from |12| . In 
conclusion, we show how to use the presumed mechanism to solve Unique-SAT using polynomial advice, and 
this implies NP C RP/poly — P/poly. 

Proof sketch Now we describe roughly how the proof works. We use repeatedly the taxation principle, 
which in the case of truthful- in-expectation mechanisms says the following: For each player i, once the 
valuations of the other players are fixed, the mechanism implicitly offers a menu Ai whose entries are 
distributions over sets Si and prices pi. The menu consists of all the possible distributions that the player 
could receive when reporting a certain valuation. The taxation principle (which follows directly from the 
property of truthfulness) states that for each valuation vi reported by player i, the mechanism must allocate 
to him the distribution from the menu that maximizes the expected utility 'Ei[vi{Si) — pi]. 

We start from a basic instance, as in [4], where each player i has a random desired set Ai. As was proved 
in [3], the approximation guarantee implies that there is a player i whose allocation in this instance is at 
least somewhat correlated with his desired set (to an extent that depends on the approximation factor). In 
the following, we fix this "special player" as well as the valuations of the other players. 

Next, we consider more complicated valuations for the special player, that we call "double-peak valua- 
tions" . These valuations were developed in [12] . Each double-peak valuation is supported on the union of 
two sets A\JB and is defined in such a way that the sets A, B have a "high value" , while sets that are evenly 
split by the partition {A, B) have a lower value. The technical obstacle here is that we want to present the 
valuations succinctly on the input, without explicitly revealing the partition [A, B). To achieve this, we use 
the list-decoding idea of 9 . 

The reason why double-peak valuations are useful in proving a hardness result is quite technical. One 
indication of why these functions might be useful is that the analytic transformation that is crucial in the 
truthful-in-expectation mechanism for coverage functions in |llj does not work for double-peak valuation 
functions. More precisely, in contrast to coverage valuations where this transformation produces a concave 
function, for a double-peak valuation the resulting function is not concave. This is the starting point of the 
hardness proof in the oracle model in [T2]. Here, we adapt the machinery of [12] to our purpose as follows. 

As in [12] , we consider double-peak valuations at different "levels" , where the cardinality of the support 
A\J B doubles at each level. We measure the "value at level j" of distributions on the menu of the special 
player by the double-peak valuations supported on A U S, where A, B are chosen randomly at level j. We 
prove that there must be two successive levels j, j + 1 where there is a relatively valuable distribution on the 
menu with respect to level j, but no distribution is very valuable with respect to level j -t- 1. This follows from 
the density-boosting technique of |12j : If this were not the case, we would obtain by an inductive argument 
a very valuable distribution at the last level, which would lead to a contradiction with the taxation principle. 

An added difficulty here is that the notion of being valuable also incorporates prices, by way of a multiplier 
A that serves as a conversion factor between values and prices. We have to ensure that the necessary multiplier 
A can be described by polynomially many bits. This leads to some technical issues that we deal with in 
this paper. In conclusion, we have a polynomial-size description of the "place to embed" a valuation, with 
respect to which a valuable distribution exists on the menu, but it cannot be found if we do not know the 
partition {A, B). 

In fact, the way we measure value at level j + 1 corresponds to what the mechanism can achieve at 
level J, if the output distribution is "balanced with respect to the partition (A,By\ Since we make it a 
computationally difficult task to find the partition {A,B), we would in fact expect the output distribution 



10 



to be balanced with respect to {A,B). But we prove that there exists a distribution on the menu, strictly 
more valuable than any that is balanced with respect to (A, B). So truthfulness in expectation implies that 
the mechanism must in fact return an unbalanced distribution. 

Finally, we show how to solve the Unique-SAT problem, assuming the scenario above. Using the list- 
decoding idea of [S^, we set up a submodular valuation encoded by a Unique-SAT formula at level j, with the 
property that if the Unique-SAT formula is satisfiable, that the player should receive a relatively valuable 
distribution from the mechanism. The satisfying assignment corresponds to the unknown partition (A, B) 
which is not easily determined by the mechanism, given the succinct representation of the valuation. The 
parameters necessary for setting up the submodular valuation cannot be all computed algorithmically, but 
we ensure that for each input size n they can be described by poly(n) bits. These parameters will be given as 
an advice string in the reduction. Finally, the property that there is no very valuable balanced distribution 
on the menu guarantees that the mechanism must return an unbalanced distribution, in case the formula is 
satisfiable. This would allow us to determine the partition {A, B) and find a satisfying assignment. Hence, 
we are able to decide the Unique-SAT problem using polynomial advice, which implies that NP C P/poly. 

3.1 The Bidding Language 

Here, we define two classes of submodular functions along with the encoding that will be used in the hardness 
proof. 

Polar additive valuations The first type of function that we use (following [1]) is simple: 

• 'VA,u){S) — \S f^ A\ ^ ijj\S \ A\, where A is a set and w > is a positive real number. 

Such functions are monotone, additive and hence also submodular. We encode them naturally by specifying 
the set A and the parameter uj. 

Double-peak valuations The second type of function (following [12]) is one we call "double-peak valu- 
ation" , because each has two disjoint sets A, B of "high value" . The function is parameterized by disjoint 
sets A, B of equal cardinality and real numbers a, /3 > 0. The value of fA.B,a.piS) is defined as follows: 

• Let X — ''^^1 and y — ^^\b\ ' ■ Then fA,B,a.ji{S) — ^{x,y) where Tjj{x,y) is defined as foUowsl^ 



• If |x - 


- y| < ^, then ip{x,y) ^ 1 


-(1^ 


x+y\2 
2a ) + 




• Ifa;- 


y > P, then ip{x, y) ^ 1 — 


(1- 


2a )+y^ 


2 V+I3 ^ 
2a + 


. Ify- 


X > /3, then ip{x, y) ^ 1 — 


(1- 


2a 


2a ) + 



We also define a "symmetrized double-peak function" fAuB,a by 

• IaubAS) = ^i^, ^) = 1 - (1 - ^)+ where x, y are as above. 
Note that fAuB.a{S) does not depend on (3 and the partition oi AUB into A, B, which justifies our notation. 

It is shown in [T^] that these functions are monotone submodular. They could be encoded by specifying 
the quadruple {A, B, a, P), or the pair {A U B,a) in the symmetric case, but that is not the encoding we 
use. Instead, we apply a more intricate encoding using list decodable codes, developed in [5]. We warn the 
reader that this encoding may not look very natural. All we ask is that an encoding T defines a submodular 
function vr such that given T and a set 5", the value of vr{S) can be computed efficiently. In particular, 
this encoding allows one to use any algorithm in the value oracle model, such as the (non-truthful) (1 — 1/e)- 
approximation for welfare maximization in combinatorial auctions j21j . In contrast, we prove that the 

^ We define (x)^ = max{a:,0} to be the positive part of x. By (x)^, we mean (max{x, 0})^. 
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requirement of truthfulness in expectation prevents one from achieving any constant-factor approximation 
for the same submodular valuations. 
We will need the following definition. 

Definition 3.3 (List Decodable Codes). A pair of functions {E,D), E : T."" ^ T." , D : S" (I]™)^ 
i — poly{n) is called an (n, m, (i)-list decodable code if: 

1. E is injective. 

2. For c e S" and x € E™, x E D{c) if and only ifdnic, E{x)) < d. 

Here, dn denotes Hamming distance, dnix^y) = \{i : Xi ^ yi\\- In this paper we are only interested in 
cases where E and D can be computed in polynomial time. 

In particular, we use list decodable codes over S = {0, 1}, i.e. binary codes. We fix a family of binary 
(m",m',i(l — /3)m")-list decodable codes for all sufficiently large m" S Z+ (over S = {0,1}, with m" = 
poly{m') and constant /3 > 0; such codes are described for instance in pS])- We denote the encoding function 
by E : {0, 1}™' -> {0, 1}™" and the decoding function by D : {0, 1}" ' ({0, l}'"')^. These codes are fixed 
in our reduction and assumed to be implicitly described by the parameters m', m" and /3. 

The encoding of double-peak valuations We encode a valuation function by parameters a, /3 > 0, 
an ordered set C of cardinality \C\ = 2m" and a boolean formula (j) on m! variables, which is assumed to 
have at most one satisfying assignment. (If (p h^'S multiple satisfying assignments, it does not encode a 
submodular function and we do not assume anything about how the mechanism behaves on such input.) 
Given (C, 0, a, we define vc,4>,a.p{S) as follows. 

• If (/) does not have any satisfying assignment, then we define vc,4>,a,piS) — fc,a{S) (see the definition 
of fAuB,a above, where we set AU B — C, ignoring the ordering of the elements of C). 

• If has a (unique) satisfying assignment x — {xi, . . . ,Xm'), let y — E{x) e {0, 1}'" . We identify the 
ordered set C in some canonical way with [m"\ x {0, 1} (for example by a bijection which maps the 
ordering of C to the lexicographic ordering of [m"] x {0, 1}) and we define A by an expansion procedure 
A = exp{y) as follows: If yi = 0, then {i, 0) G A and («, 1) ^ A; if = 1, then {i, 0) ^ A and («, 1) € A. 
We also define B = C\A. Note that \A\ = \B\ = m". We define vc,4,,aAS) = fA,B,»AS)- 

We show that (C, 0, a, /3) is indeed a legitimate representation of vc,4>,a.p in the sense that the function 
can be evaluated efficiently, given (C, 0, a,/?). 

Lemma 3.4. Given {C,(l),a, l3), the value of vc,cj>.a,p{S) can he calculated in polynomial time for any S. 

Proof. First, the value of the function depends only on the elements in C, so we might as well restrict the 
ground set to C for now. We view subsets of C as strings in {0, 1}[™ l^i^^i); the Hamming distance dn is 
then equivalent to the symmetric difference between sets. Observe that if S is balanced in the sense that 
US' n — jS* n B|| < /3m", we can calculate the value of vc,,p,a,i3{S) without having to know the partition 
C ~ AU B, because we are in the symmetric case where the value depends only on \S n C|. Therefore, we 
have to show a polynomial-time procedure that finds out whether S is balanced or unbalanced and finds 
the partition {A, B) in the unbalanced case. In the following we show a procedure that identifies whether 
ISnAj — |S'\B| > (3m" and in that case finds [A, B). The other case is similar (by considering the complement 
of S in C). 

Claim 3.5. Let S C Ayj B . Af] B = % and\A\ = \B\ = m". // jS n A| - jS* \ B| > /3m" then dniS, A) < 
(l-/3)m". 

Proof Using the facts that SCAUB, AnB==0 and \A\ = m", 

/3m" <\SnA\~\SnB\^ m" - \A\ S\ - \S \ A\ ^ m" ~ dniS, A). 

□ 
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For a E {0, 1}, we define a contracting procedure con" : 

2[m"]x{o,i} ^ {0,1}"" that takes a set S' C 
C ~ [m"] X {0, 1} and produces the following m"-bit string y — con°-{S): If («,0) ^ S and (i, 1) € 5 then 
Hi = 0. If (j,0) e 5 and (i, 1) ^ 5 then = 1. Otherwise, yi = a. Note that considering the expansion 
procedure above, con"" {exp{y)) — y for any y e {0, 1}™ and a £ {0, 1}. However, some subsets of C are not 
the expansion image exp{y) of any y e {0, 1}™ . We now need the following simple claim: 

Claim 3.6. If A = exp{y) and dniS, A) < (1— /3)m" then there exists a E {0, 1} such that dH{con°-{S), con"-{A)) < 
(1-/3)^- 

Proof. Consider a pair of elements (i, 0), (i, 1). Since we assume A — exp{y), A contains exactly one of the 
two elements. If 5* n {{i, 0), («, 1)} = ^ n {{i, 0), (i, 1)}, then con°-{S) and con"-(A) will agree in the i-th bit, 
regardless of a. If S contains one of these elements and not the same one as A, then con'^{S) and con°(A) will 
disagree in the i-the bit, regardless of a. If S contains both or neither element, then con°'{S) and con°'{A) 
agree in the z-bit for one of the values a = or a = 1, and not for the other. In summary, two disagreements 
between S and A translate to one bit of disagreement after applying con", and one disagreement between 
S and A translates to a bit with i probability of disagreement (in expectation over choosing a € {0, 1} at 
random). Thus the claim must hold for some value of a. □ 

To complete the proof, we observe that if a; is a satisfying assignment to the formula ((>, A = exp{E(x)) and 
dH{con'^{S), E{x)) = dH[con°-{S),con°-{A)) < (1 — then the list-decoding property of the code implies 

that the unique satisfying assignment x must be one of the polynomially many strings that D{con'^{S)) 
returns. We can check if x is one of the strings of D{con°'{S)) simply by testing the satisfiability of each of 
the assignments that D(con°'{S)) returns, for each of the two possible values of a. If none of the assignments 
is satisfying, we know that S is balanced with respect to {A, B) and we do not need the knowledge of the 
partition {A, B) to compute vc,,p,a,i3iS) = fc,a{S)- If we find the partition (A, B), computing vc',4>,a,i3iS) = 
fA,B.a,fi{S) is straightforward. □ 

The formal proof of computational hardness for combinatorial auctions with these valuations can be 
found in Appendix lAl 



4 Truthful-in-Expectation Mechanisms for Exact Coverage CPP 

We now turn our attention to combinatorial public projects with coverage valuation. A coverage valuation is 
defined as follows: there exists a universe U, and each item of the auction j G M is identified with a subset 
Sj C U. Now we define the valuation v as v{S) = Uj^sSj. 

Theorem 4.1. Unless NP C P/poly, there is no constant-factor truthful-in- expectation approximation for 
the exact CPP problem with coverage valuations, even for 1 bidder (i.e. the problem max{/(S') : |5| = fc} 
where f is a coverage function). 

Let us point out some aspects of this result and put it in context. For (exact) CPP a significant gap 
in approximability between truthful vs. non-truthful mechanisms was proved in |20j . In particular, this 
separation was proved for deterministic mechanisms and the class of submodular functions. The proof 
followed the characterize and optimize approach, involving a characterization of all deterministic truthful 
mechanisms and then a bound of VCG-based mechanisms by an application of the Sauer-Shelah lemma. The 
proof was subsequently simplified in [2] , where it was proved that no deterministic truthful mechanism can 
achieve a m^/^~'^-approximation for coverage functions (a subclass of submodular functions), still relying the 
Sauer-Shelah lemma. 

Our result rules out not only deterministic but also randomized truthful-in- expectation mechanisms. While 
the previous proofs can be extended to universally truthful mechanisms quite easily, truthful-in-expectation 
mechanisms maybe more powerful in this setting. In particular, |10j proved that the flexible CPP problem, 
where a mechanism is allowed to return a set S of size at most /c, admits a truthful-in-expectation (1 — 1/e)- 
approximation for coverage functions. Therefore, we are right on the boundary between tractable and 
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intractable problems, in terms of truthfulness in expectation. The first hardness for truthful-in-expectation 
mechanisms has been obtained only recently, in the value oracle model (for the exact CPP problem in [4], 
for the flexible CPP problem and combinatorial auctions in |12]V Here we prove a computational hardness 
result, for the natural class of coverage valuations. 

Proof overview. Our proof is very simple, directly from the hardness of Max fc-cover, using an argument 
somewhat similar to [12'. In particular, we do not use the Sauer-Shelah lemma or any similar combinatorial 
tool. The proof follows an outline somewhat similar to [12]; it is easier to explain if we assume that the 
mechanism is maximal- in-distributional-range (MIDR), or in other words that all prices are equal to 0. Then, 
the mechanism must maximize over a certain range of distributions TZ. Suppose the mechanism provides a 
c-approximation. First, we prove that for every set A of size fc, the range TZ must contain a distribution that 
takes at least a c-fraction of A in expectation - this follows directly from the property of c-approximation. 
Therefore, if we run A4 on an instance of Max fc-cover that that has a hidden optimal solution of size fc, the 
range contains a solution that is somewhat correlated with the optimal solution. Therefore, optimizing over 
the range will reveal whether the optimum is "high" or "low" . 

We remark that [121 proves that every truthful-in-expectation mechanism can be replaced by an (approx- 
imately) maximal-in-distributional-range mechanism. However, this reduction involves a non-uniform step 
that causes problems in the setting of computational complexity, because [12] does not give any bound on 
the size of the non-uniform advice that would be needed. Therefore, we deal with truthful-in-expectation 
mechanisms directly here, without appealing to this reduction. 

Proof. Assume that is a truthful-in-expectation mechanism for the problem max{/(S') : |5| — fc}, where 
/ is a coverage function. Let m denote the size of the ground set. First consider what happens when we 
run the mechanism on the input f{S) — \S H A\ where A is some set of size k (/ can be easily represented 
as a coverage function). returns a distribution Da over sets of size k, and a price > 0. Due to the 
approximation guarantee. 



We also note that the price pA returned by the mechanism should have bit representation polynomial in m, 
since the polynomial is polynomial-time. We denote by 



the average price over all sets A of size k. This number still has a bit representation polynomial in n. 

Now we describe how to solve the Max fc-cover decision problem for e = f2(c^), using the mechanism 
M (and polynomial advice, namely the number pn). Consider an instance of the Max fc-cover problem on 
universe U, with the sets indexed by M and denoted by Se,e G M. By examining Feige's reduction [14|, we 
can see that in the YES case, there are k sets covering the entire universe. Moreover, each element of the 
universe is covered by the same number of sets in the instance; let's call it d. The total number of sets is dk. 

Let TT : M — )• M be a random permutation of the set M. We let /(T) = pm \ Ueeir(T) be the input 
valuation to the mechanism. We claim the following: If we start from a YES instance, then the mechanism 
returns a distribution D such that E/j^^i [/(i?)] > (1 — 1/ e + 2e)pm\U\. If we start from a NO instance, then 
the mechanism returns a distribution D such that E^j^^i [/(i?)] < (1 — l/e + e)pm\U\. We can distinguish 
these two cases probabilistically by running the mechanism repeatedly, with the advice Pm- This would 
imply that NP C BP P /poly = P/poly. 

In the case of NO instance, the proof is simple: There is no collection of fc sets covering more than a 
(1 — l/e + e)-fraction of the universe. This means that f{T) < (1 — 1/e -I- e)pm\U\ for every \T\ = fc, in 
particular for any solution returned by the mechanism. 

Now suppose the Max fc-cover instance is a YES instance. In this case there is a choice of fc sets that 
cover the universe, i.e. a set A C M such that f{TT'^{A)) = We feed / as input into the mechanism. 

Recall that we shuffle the elements by a random permutation tt, so the actual location of the optimal set 
is random from the point of view of the mechanism. However, for any particular set A' , \A'\ = fc, there is 



ER^DA[\Rr\A\] > ck. 
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a distribution Da' possibly returned by the mechanism that takes at least a c-fraction of A' on average. 
We can condition on ti{A) = A' , and the elements outside of A' are still randomly shuffled. WLOG we 
can actually assume A' — A. Let us compute what expected value this distribution gives in terms of the 
objective function /: 

'^Rr^D{A)[f{R)]^ Pm'^Rr^D(A)[ [J Se\- 

Note that R takes at least ck elements from A, and the remaining elements are taken randomly from the 
complement of A. In terms of the Max fc-cover instance, this means that we take c'k sets from the optimal 
solution (E[c'] > c), and (1 — c')fc sets from outside of A. Condition also on the number c'. Due to the random 
shuffle, every choice of (1 — c')fc sets from outside of A has the same probability. Since the total number of sets 
is dfc, this means that each set outside of A is taken with probability [1 — c)/d. The negative correlations in 
the appearance of different sets can only help in terms of coverage probability; hence we can assume that the 
sets appear independently with probability (1 — c') / d. Since each element not covered by IJeg^ Se appears in 
d—1 sets outside of S, this means that R covers it with probability at least 1 — (1 — (1 — c')/ d)'^^^ ~ 1 — 
(since d will be a very large constant in the reduction). Therefore, we obtain 

^R^D(A)[f{R)] > Prnic' + (1 - c')(l - e'='-'))\U\. 

This is a convex function of c' which is equal to (1 — l/e)p„i\U\ at c' = and equal to Pm|C^| at c' — 1. For 
small c' > 0, it behaves like (1 — 1/e + 6(c'^))pm|C/|. Since E[c'] > c, due to convexity the worst case occurs 
when c' is actually deterministic and equal to c. Therefore, for e = 0(c^) with a suitable constant, we will 
gctE[/(i?)] > (l-l/e + 3e)p„,|(7|. 

By averaging over the random permutations tt, we still get that the mechanism returns a solution of 
expected value at least (1 — 1/e + 3e)pm\U\, and the average price is pm- Therefore, the average utility (= 
expected value minus price) of this solution is at least (1 — 1/e + 3e)p„i|[/| ~ p,n > (1 — 1/e + 2e)p„i\U\ (since 
\U\ oo). 

The final argument is as follows. If there is a distribution of expected utility at least (1 — 1/e + 2e)pm\U\ 
that the mechanism could possibly return on a certain input, by truthfulness in expectation this means that 
on the true input the mechanism must return a solution of expected utility at least (1 — 1/e + 2e)pm\U\. 
The price cannot be negative due to individual rationality, hence the expected value of the returned solution 
must be at least (1 — 1/e + 2€)pm\U\. This concludes the proof. □ 

5 Mechanisms for Multi-Unit Auctions 

In a multi-unit auctions we have m identical items and n bidders. Each bidder i has a valuation function 
Vi : [m] M. We use the standard assumptions that the valuations are monotone and that Vi{0) = 
0. The goal is to approximate the social welfare in time that is polynomial in n and logm. In [5] a 
truthful-in-expectation FPTAS for this problem was given, by constructing a maximal in distributional 
range algorithm. Furthermore, they show that if we there are two bidders and we require that the mechanism 
either always allocate all items or not allocate any item at all, then no universally truthful mechanism can 
provide an approximation ratio better than 2, but a simple adaption of the MIDR FPTAS is still a truthful- 
in-expectation FPTAS even for this restricted setting. The following theorem shows that the option to 
sometimes not allocate any item at all is crucial for obtaining good approximations using MIDR algorithms. 

Theorem 5.1. Let A be an MIDR algorithm for multi-unit auctions with two bidders that always allocates 
all items and runs in time polyilogm). Then the approximation ratio of A is no better than 5 + e, unless 
RP = NP. 

Proof. We consider the following class of valuations that contains two types of valuations. The first type is 
single minded valuations: a valuation v is called single minded when there exists some number r such that 
for every r' > r we have that w(r') = 1, and for every r' < r we have that v{r') = 0. The second type 
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contains a valuation v^j, for every SAT formula (f> with log m variables: Vf{s) = 2 ■ s + 4>(s). That is, the value 
for the bundle of s items is 2 ■ s, and a "bonus" of 1 if s (viewed as a {0, string and interpreted as 

an assignment to the variables) satisfies ^. Notice that both types of valuations can be easily described in 
O(logm) space in the natural way. 

Lemma 5.2. Let {x,m — x) be an allocation. Then, there is a distribution D in the range such that D 

outputs {x, m — x) with probability at least 2e. 

Proof. Consider the instance where both players are single minded as follows: Bidder 1 has a value of 1 for 
X items or more and for less than x items, and Bidder 2 has a value of 1 for m — a; items or more otherwise 
his value is zero. Observe that all allocations except {x,m — x) has a welfare of 1, and that {x,m ~ x) has 
a welfare of 2. So to obtain an approximation ratio of at least ^ + e (that is, to output a distribution with 
an expected welfare of 1 + 2e), the distribution that A outputs must have {x,m — x) in its support with 
probability at least 2e. □ 

Consider the instance where one bidder has a valuation v^, for some (j), and the other one has a valuation 

where (f>' is not satisfied by any assignment, i.e., u{s) = 2 ■ s. Suppose that cj) has a satisfying assignment 
X. Notice that every allocation that corresponds to a satisfying assumption has a welfare of 2m + 1 and all 
other allocations have welfare of 2m (this is where the irremovable assumption that all items are allocated). 
From that and from the lemma, we have that there exists a distribution in the range that has an expected 
value of at least 2m + 2e, and therefore the MIDR mechanism must return a distribution with at least that 
value. This implies that in the distribution that the algorithm outputs an allocation that corresponds to 
a satisfying assignment is returned with probability at least 2e. Now we can run A several times until it 
outputs an allocation with value 2m + 1 and find a satisfying assignment to the SAT formula (p. □ 
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A Appendix for Section [3] 

A.l The Basic Instance 

Here we describe the basic instance which is the starting point of our proof. This is identical to the basic 
instance in [13] and hence we only summarize the definition and state the lemma that we need without 
proof. Note that the parameters are somewhat different from [13], because of considerations arising in the 
next section. 

Basic instance Wc construct instances with n players and m items, where n — 2^, m — mQ2^ (mg — > c» 
and £ is constant). In the basic random instance, player i has a polar additive valuation Vi(S) = w^(o) ^(S) = 

ISnAf^l+LolSXAf^l, where Af^ is a uniformly random set of mo — m/n items, chosen independently for 
each player. The following lemma is proved in |13j . 

Lemma A.l. For any c- approximation mechanism applied to the basic random instance, there is a player 
i and sets A^-^^j 7^ i, such that conditioned on the desired sets for players j ^ i being A^^\ player i gets 
allocated a random set uf'^ such that 

E[|i?f n )|] > (c/4 - ^)E[|i?(°) U []. 
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A. 2 Setup for Higher-Level Valuations 

In the following, the valuations of all players except i are fixed to be vj — Vy^m ^ for the choice of sets 

A'j^\j ^ i given by Lemma I A. 11 and a parameter cj > to be fixed later. We will vary only the valuation 
of player i who will be referred to as the special player. Since we work only with player i, we drop the index 
i in the following. We consider the following random sequence of sets of items. 

Definition A. 2. A random bisection sequence of a random sequence of pairs of sets {A^*^\ B'--'^^), {A^^\ B^^^), 
{A^^\B^^'>), generated as follows. We define A^'''> — B'^^^ ~ M, the set of all items. Given A^^^ for 
< j < we generate {A^^^^\ B'^^^^'^) uniformly at random among all partitions of A^^^^ into two parts of 
equal size. 

Observe that for each j, {A'^^\ B^^^) is just a pair of random disjoint sets of size 2^~^m. However, the 
correlation between sets at different levels will be also important. We refer to A'^^^ — A^^~^^ U S'-'^^' as the 
j-th level of the bisection sequence. 

For each pair of sets {A'^^~^\ B'^^^^^) and parameters a, (3 > 0, we consider the valuation function 
/a<j-i),s(j-i).q,^i encoded on the input as w^(j)^0^q,^^ for some particular ordering of A'-'^ (see Section [XT]) . 
Recall that this is the double-peak submodular function where A^^"^") and B^^^^^^ are the two desired sets 
of items. 

Density menu Recall that according to the taxation principle, if the special player i reports valuation Vi, 
the mechanism must allocate to him a distribution over sets and prices of optimal expected utility out of all 
the distributions potentially allocated under some reported valuation. The menu is the collection of all such 
possible distributions (given fixed valuations for all other players). Similarly to [13], we replace the menu 
here by an object that instead of the full distributions contains only the information relevant to us, namely 
the "density" of a random set from the distribution, restricted to the set of relevant items A^-'^ . We call this 
object the "density menu" . 

Definition A. 3. Given a mechanism, a .special player, and fixed valuations for the other players, the "density 
menu of level j", Aij, is a collection of probability distributions over M.'^ (pairs of real numbers), defined as 
follows: The distribution of a pair of random variables {Xj,Pj) is in Aij, if {Xj,Pj) can be generated as 

_ n j?(A(j))| 
I AW I 

P,=P(A(^)), 

where A^^^ is a uniformly random set of2^~^m items, and (i?(A), P{A)) is a random (set, price) pair allocated 
by the mechanism to the special player for some reported valuation va depending on A. 

In other words, Xj is the (random) fraction of the desired items that the special player can potentially 
receive at level j, and Pj is the respective price. Note that there are two sources of randomness in {Xj,Pj): 
the random choice of ^^-'^ , and the randomness in the distribution returned by the mechanism for a fixed 
valuation va- We illustrate this by an example: 

• Consider to = 4 and i — 1; A^^' is a uniformly random set of 2 elements out of 4. 

• Suppose that for each pair A, there is a valuation v'^ such that the special player reporting v'j^ receives 
a (deterministic) set R{A) such that \A n R{A)\ = 1, at a price of 500. This means that Aio contains 
a distribution such that (A"o,Po) = (1/2,500) with probability 1. 

• Suppose that for another choice of v'J^ for each pair A, the special player receives a random set R{A) 
such that 1^4 n R{A)\ = and the price is 0, or \A n R{A)\ = 2 and the price is 1000, each with 
prob. 1/2. Then Mq contains a distribution such that {Xo,Po) — (0,0) or {Xo,Po) = (1,1000), each 
with prob. 1/2. 
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• Finally, consider the choice of for half of the choices of A, and v'J^ for another half of the choices of 
A. Whenever reporting w^, the player receives 1 element of A at a price of 500. When reporting w^, 
he receives or 2 with probability 1/2, at a price of or 1000. Overall, he receives elements from 
A with probability 1/4, 1 element with probability 1/2, and 2 elements with probability 1/4. Hence, 
A^o also contains the distribution (Xo,Po) = (0,0) with probability 1/4, (1,500) with probability 1/2 
and (2, 1000) with probability 1/4. 

Closure of a density menu Furthermore, it will be convenient to make the menu closed and convex as 
follows. 

Definition A. 4. We define A4j, the closure of the density menu at level j, to he the topological closure of 
the set of all convex combinations of distributions from the menu A4j . 

To avoid confusion, we emphasize that the convex combinations occur in the space of distributions, 
i.e. they are obtained by averaging probabilities of each possible outcome, and not the values of {Xj, Pj). A 
distribution of {Xj,Pj) is in Mj, if its distribution can be approximated arbitrarily closely by some convex 
combination of distributions in Mj. 

A. 3 The Main Reduction 

The oracle hardness proof in |13| relies on the fact that a mechanism bounded by a polynomial number of 
value queries to a valuation fA,B,a,f3 cannot identify the two sets A, B and with high probability returns 
a distribution that is balanced with respect to these two sets. Then, this argument is harnessed to show 
that at each successive level, the mechanism must contain distributions in the menu that are in some sense 
more valuable than at the previous level. We call this the density-boosting property. Eventually, the density- 
boosting property leads to a contradiction with truthfulness at the last level. 

Here, we use this argument differently: We argue that unless a contradiction with truthfulness occurs at 
the last level, there must be a pair of successive levels where the density-boosting property is violated. This 
allows us to find parameters for embedding the Unique-SAT problem in our instance and solving it using the 
presumed mechanism. The fact that the density-boosting property is violated at some level follows directly 
from [13] : but we need to prove a little bit more, namely that the parameters describing the violation can be 
encoded succinctly by polynomially many bits. The precise statement that we want to prove is the following. 

Definition A. 5. For a parameter a > 0, define ipa{x) — min{a;/Q!, 1}. 

Lemma A. 6. There are absolute constants 7,e > such that the following holds. Consider a (1 — e)- 
approximately truthful-in-expectation mechanism for combinatorial auctions with submodular valuations, n ~ 
2^ players and m — mo2^ items (for some constant I and arbitrary mo ), providing a c- approximation in social 
welfare for c = 2^^^ . Then there is j € {0, ...,£— 1} and parameters a > 0, A G 10^(m + 2)], described 
by polynomially many bits such that there is a pair of random variables {Xj,Pj) with a distribution in the 
menu closure A4j, and for every {Xj^i, Pj^i) with distribution in Adj^i, we have 

E[A(1 - (1 - MX,+i)f) - P,+i] + ^ < (1 - e)E[AVo(X, - 10-0] - E[P,-]. 
Assuming this lemma, we finish the proof of Theorem 13.21 as follows. 

of Theorem \3.2\ Assume that there is a (1 — e)-approximately truthful-in-expectation n-'^-approximation 
for combinatorial auctions with n bidders and valuations of the type described above (polar and double-peak 
valuations). We can assume w.l.o.g. that n = 2^ (otherwise let us prove the theorem for the nearest power 
of 2, and adjust 7 accordingly). We are given a Unique-SAT formula (p on m' variables and we generate an 
instance of combinatorial auctions that will enable us to solve the Unique-SAT instance. We also describe 
an advice string depending only on the size of the formula, which will be needed to complete the reduction. 

We set P — 10^^ and m — nm" — 2^to", where m" — poly{m') are the parameters of an {m",m', i(l — 
/3)m")-list-decodable code. Let j be the level provided by Lemma [A. 61 for n players and m items. If j > 0, 
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we adjust the code by duplicating each bit of a codeword 2^ times, so that codewords have length 2^~^m. 
The double-peak valuations using this code are then defined on a support of size 2-'+^~^m, which is what we 
need at level j. 

For players i' ^ i, let their true valuations be the polar valuations VA^/.^ii' 7^ « guaranteed by Lemma [Ol 
(These sets depend only on the size of the instance and hence can be given as part of the advice string.) 
For player i, let the true valuation be Xvc,ij>,a,i3 where C is a randomly ordered random set of 2m" = 2-'~^m 
items, and j, a, A are the parameters given by Lemma [A. 6 1 Again, these parameters as well as /? are part of 
the advice string. (Aw denotes multiplication of a valuation function pointwise by a scalar A.) We run the 
mechanism with C and its ordering randomly chosen, and all calculations will be in expectation over this 
random choice. 

Now, if is a satisfiable formula, we denote by (A, B) the partition of C corresponding to the (unique) 
satisfiable assignment. Then the valuation is Awc.^.q,^ — XfA,B,a,f}- Recall the definition of fA,B,a,!){S) = 
y) from Section [3TT1 using the variables x = ^^^f^ ^'^"^ V ~ ■^^Sf^' ^^^"^ observe that in all cases, 

Xvc,4,,a,i3{S) = Xi}{x,y) > Xi}{x, 0) > Amin I- — ll = \^a{x - (3). 



Due to C and its ordering being chosen randomly, (A, B) is distributed uniformly over all pairs of disjoint 
sets of size 2^~^m. In particular, the set A is a uniformly random set of size 2^~^ra. By the definition of 
a density menu M.j (Definition IA.3|) . if a pair of random variables {Xj,Pj) has a distribution in Aij, it 
means that there are valuations va that player i could declare, depending on A, such that the fraction of 
A that he receives is given by the random variable Xj, and the price he is charged is Pj. Considering the 
above description of player i's true valuation, where the fraction of A received is denoted hy x — -^^^j^, the 
respective utility that the special player obtains from such a distribution is at least 

U = E[X^po,{Xj - P)- Pj] = E[A^„(Xj - 10^0 - Pj]. 

We remark that since this expected utility is achieved by a distribution in the menu closure Mj, at least 
the same expected utility (or arbitrarily close) can be achieved also by a distribution on the menu M.j itself 
(using the fact that taking convex combinations of distributions of Xj results in convex combinations of 
expected values, of any function of Xj). By the property of approximate truthfulness in expectation, if 
utility at least lA can be achieved for some valuation possibly declared by the player, then utility at least 
(1 — f)U > (1 — f)'Fi[X^a{Xj — 10"^)] — E[Pj] must be achieved when declaring the true valuation Xvc,4,,a.i3- 
Observe that this is the right-hand side of the inequality in Lemma lA. 61 

Now consider the random set R that the player i actually receives when declaring the true valuation 
Xvc,4,,a,p- We claim that this set must be at least sometimes significantly unbalanced with respect to the 
partition {A,B). Namely, we claim 
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\A\ \B\ 



Assume for a contradiction that ^"^^ — -^^pp- G [—(3,+ (3] with probability at least 1 — As before, we 
denote x = ^"^^ and y = ^^j^y^. When x — j/ G [— /?, -I-/3], we have by the construction of the valuation 



^CAo,/3(^) = l- =^-[^-^^1 =l-(l-V'c.(^j + l)) 
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where Xj+i — -^^j^p^- When |a; — j/| > /?, the value vc,4>,a,p{R) can increase, compared to this formula, by 
no more than 1. Since this happens with probability at most ^j^, we get 

nvc,<^,o.AR)\ < E[i - (1 - {x,+i)f] + ^. 
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The expectation here is over C, its ordering and the randomness in R. By the definition of level-(j + 1) menu 
fPefinition lA.Bp . the menu Mj+i contains the distribution of the pair Pj+i) where Xj^i = ^^^^ and 

Pj+i is the respective random price that player i is charged. By the above inequahty, the utihty of player i 
when declaring his true valuation is 

E[Ai;c.0.a,/3(i?) - P-j+i] < AE[A(1 - (1 - (^,+1))') - Pj+i] + ^. 
However, Lemma lA.61 states that for any distribution in Mj+i (even in Adj^i), 

E[A(1 - (1 - MXj+i)f) - P,+i] + ^ < (1 - m^MXj - 10-')] - nPj] < (1 - 

Recall we proved that the right-hand side is a lower bound on the utility that player i receives when declaring 
his true valuation. This is a contradiction which proves ([T]) . 

Therefore, with probability at least the returned set R satisfies ^'^^ — ^^jjp ^ i^l^i+P]- But 
once we find such a set (by running the mechanism polynomially many times, this will happen with high 
probability), we can determine the partition of C into {A,B) by decoding the set R C] C using the list- 
decodable code, and checking whether any of the decoded strings a; is a satisfying assignment to the formula 
(j). In conclusion, we solve the Uniquc-SAT problem and hence also the SAT problem (by a randomized 
reduction) in RP/poly = P/poly. □ 



A. 4 Proof of Lemma IA.6I 

In this section, we prove Lemma |A.6[ which completes the proof. This lemma relies on the density-boosting 
technique of [13]. In particular, we appeal to the following technical lemma proved in [13^. The content 
of this lemma is a boosting argument about distributions at different levels that leads to an exponential 
blow-up in terms of density. 

Lemma A. 7. There are absolute constants e,S > such that the following holds for any sufficiently large 
£ £ N. If Xq, . . . , Xi are collections of random variables in [0, 1] such that 

• there is Xo in Xq such that E[Xf)] > c for some c > 2^^, and 

• for every Xj in Xj and for every function of the form -ipa (t) = min {^, 1}, a e [(5^/2^ 1], there is Xj+i 
in Xj^i such that 

E[l - (1 - V^„(X,+i))2] > (1 - e)E[MXj - 10-')] - 10-' 

then there is a sequence of variables Xj in Xj and parameters 1 = ao > ai > ■ ■ ■ ai > S'^^ such that for 
each j = 1, 2, . . . , 

a,(E[^„^.(X,)])i+^>(i±^yci+^ 

We remark that instead of "for every function of the form ilJa{t) = min l}", the assumption in [T3] 
is formulated as "for every non-decreasing concave function" . However, the only non-decreasing concave 
functions that are used in the proof are of the form above. Also, the possible parameters a arising in the 
proof are in the interval [5^/^ , 1] , because ao = 1 and in each step a can decrease by at most a factor of VS. 
Therefore Lemma IA.7I follows from the proof in . 

Using this lemma, we first prove the following as a stepping stone towards Lemma [A. 6 1 

Lemma A. 8. There are absolute constants 7,(5, e > such that the following holds. Consider a (1 — e)- 
approximately truthful- in- expectation mechanism for combinatorial auctions with submodular valuations, n — 
2' players and m = uiqI^ items (for some constant i and arbitrary mo), providing a c- approximation in social 
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welfare for c = 2^'^^ . Then there is j € {0, . . . ,£~ 1} and a parameter a £ [S^^^ , 1] described by polynomially 
many bits such that the menu closure Aij contains a distribution of a pair {Xj, P.j) such that E[Pj] < m + 1, 
and for every with a distribution in Mj^i, either 

E[l - (1 - ^„{Xj+i)f] < (1 - e)E[^,(X, - 10-^] - 10-^ 

or 

E[P,+i] > E[P,] + i. 

Proof. Let e, 5 > be the constants provided by Lemma [A. 71 We define 7 = 2(i+s) • Assume to the contrary 
that we have a (1 — e)-approximately truthful-in-expectation mechanism for n — 2^ players, m = mo2^ items, 
providing a, c — 2^'''^-approximation in social welfare. In addition, for every j £ {0, 1}, a G [(5^/^, 1] 

and every distribution {Xj,Pj) in Mj, with E[Pj] < to + 1, there is a distribution (Xj^-i, Pj+i) in Mj+i 
such that 

E[l - (1 - > (1 - e)E[^„(X, - 10-^] - 10^^ 

and 

E[P,+i] < E[P,] + i. 

We start from the basic instance fSection IA.1[) . where we set ut — c/8. According to Lemma [A. 11 we 
choose a special player and fix the valuations of the other players. Let P'^°^ be the random set allocated to 
the special player, Pq the respective price, A^") his desired set, Xq = , cq — E[Aro] and po — E[Po]. 

Lemma [A . 1 1 implies cq > c/A — uj = c/8 = 2~^^'^. Observe also that po cannot be very large due to individual 
rationality: valuations in the basic instance are bounded by m, so we have Pq < to. 

Now let us consider the density menu at different levels and their closures A4j fSection lA.2p . We define 
Xj to be the collection of random variables Xj such that {Xj,Pj) is in A4j for some price Pj such that 
E[Pj] < Po + f ■ As discussed above, we have Xq in Xq such that E[Xo] — cq > 2~'^^~^ > 2^^ for j£ 
sufficiently large (which can be assumed, because this corresponds to the approximation factor c = 2^'*'^ 
being sufficiently small). 

By our assumption by contradiction (beginning of proof), the collections Xo,Xi, . . . , Xi satisfy the as- 
sumptions of the technical Lemma lA. 71 (Note that prices can increase by l/£ in each step, which is consistent 
with our definition of Xj.) Consequently, the lemma implies that there is a random variable Xi in the col- 
lection Xg and ai G [(5^^^, 1] such that 

a,m^,{x,)]y+' > ci+'. 

Recall that ipaiit) — min{^, 1}. Therefore, 

E[Xi] > aeE[^c.AXi)] > a(E[V'a, (X,)])i+^ > (^^) 4+' > 2'''-'cJ+^. 
Since Xi is in Xg, the respective price is bounded by E[P£] < Po + 1. Now consider the following expression: 

E[ujmXe - Pe] > ujm2^^^-^cl+^ - Po - 1- 

The distribution of {Xi,Pe) is in the menu closure Me] recall that this involves taking convex combinations 
and limits of distributions on the actual menu A4e- Therefore, a slightly weaker linear equality must be 
satisfied by some pair {Xg, Pg) with a distribution on the actual menu Mf. 

E[ojmXe - Pe] > wto2'''^-^cJ+* - Po - 2. 
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Recall that being on the menu Mi means that Xi — j^^,, j = where M^'^ is a random set allocated 

to the special player for a certain valuation at level £. Consider now what would happen if the special player 
reports this level-£ valuation in the basic instance (where his true valuation is a polar one, u^(o) i^{S) = 
\S n Ai \ + uj\S \ Ai\) . He would receive expected utility 

'E[va,,uj{R'^^^) - Pe] > E[a;|7?('^)| - Pt] > E[wto1^ - Pe] > ujm2^^^-''cl+^ - pa - 2. 
Using Co > c/8 = 2-'<^-^ , we get 

EK(o),Ji?('^) - P^] > um2'''-'cl+'-p, 2 > 2^^^-(i+^)(^^+3)moco -po - 2. 
Since we chose 7 — 2{TT5)' ^^^^ means 

EK(o,, - Pi] > 2^^^/2-3(i+^)^oCo - Po - 2. (2) 

On the other hand, the set i?*^"'' actually allocated under declared valuation w^(o) ^ gives 

EK(o)^(i?("^)] =E[|i?(°)nA(°)|]+t^E[|i?(o)\A(°)|] < -E[Xo]+t^E[|i?(°)|] < —E[Xo] 

n n 

using again LemmaEHto say that f E[Xo] = E[|i?(°) n A^") |] > (c/4 - w)E[|i?(") |] = wE[|i?(o)|]. Therefore, 
since E[Xo] — cq and E[Po] Po], 

E[fA(") - A] < — E[Xo] - E[Po] = 2TO0C0 -Po- (3) 

n 

Comparing ^ and ([3]), we see that for sufBcicntly large toq and £, the special player is significantly better 
off reporting a level-^ valuation that gives him the random set i?^^-* at a price Pi , rather than reporting his 
true valuation f^(o) ^. This would violate the assumption of (f — e)-approximate truthfulness in expectation. 
Therefore, we have proved the lemma by contradiction. □ 

Now we are almost done - we just have to use Lemma lA.Sl in order to prove Lemma lA.6l This is essentially 
a convex separation argument in the plane: we want to turn two separation inequalities for a convex set into 
one inequality. However, some technicalities arise because of the requirement that the separating inequality 
should be described by a polynomial number of bits. 

of Lemma \A.6[ Assume that we have a mechanism as described in the lemma. These are the same conditions 
that we assume in Lemma IA.8I Lemma IA.8I implies that there is j G {0, ...,£— 1} and a parameter 
a G [(5^/^,1] described by polynomially many bits such that the menu closure M.j contains a distribution 
{Xj,Pj) such that for every distribution {Xj+i, Pj+i) in A4j+i either 

E[l - (1 - < (1 - e)E[^„(X, - IQ-^] - 10"^ 

or 

E[P,+i] > E[P,-] + 1. 

Define 

Q,+i = {(E[l - (1 - V'„(X,+i))2],E[P,-+i]) : e M-}. 

Then Qj+i is a closed convex set in the plane, because taking convex combinations of distributions of 
Pj+i) corresponds to taking convex combinations of the respective points in the plane. Moreover, by 
the above Qj+i is disjoint from the closed convex set 

7^, = {iq,p) : 1 > g > (1 - e)nMXj - IQ-')] - 10-^0 < p < E[P,] + 1}. 
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Next, we replace TZj by a subset TZ'j C TZj, which is defined as fohows: 
n'^^iiq^p) : q<l,p>0, 

^(q - (1 - e)E[yj^{X, ~ IQ-')]) >p~ E[P,] 

10^(m + 2){q - (1 - e)E[7/'„(Xj- - lO-^]) > P 

It can be verified that TZ'j C TZj, using the bounds q < I and E[Pj] < m + 1: every point {q,p) satisfying the 
constraints of TZj also satisfies the constraints of TZj . 

Since Qj+i is disjoint from TZ'j, they can be separated by a line through the point ((1 — e)'E[ipa{Xj — 
10-0],E[Pj] + ^) which is on the boundary oiTZj: there is a coeSicient A such that for each {Xj^i, Pjj^i) E 
Mj, we have 

A(E[1 - (1 - - (1 - e)E[MXj - 10-')]) < nPj+i] - E[P,] - ^. 

Moreover, the coefiicient A must be in the interval 10^(m + 2)], otherwise this constraint does not separate 
from TZj (see the constraints defining TZ'j above). Finally, we round A down to a multiple of j^, to obtain 
A' — [4:£\\ Since we have |A' — A| < ^, the following inequality is still vahd: 

A'(E[1 - (1 - - (1 - e)E[V.o(X, - 10~0]) < E[P,+i] - E[P,] - 1. 

As A' is in the form A' = |j where £ is a constant and I' is an integer bounded by M ■ 10^ (to + 2), A' can be 
described by a polynomial number of bits. This is the inequality claimed by Lemma lA.61 □ 



1 

~ 2£' 
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